SYSTEM AND METHOD FOR SECURING RF TRANSACTIONS USING A RADIO FREQUENCY IDENTIFICATION DEVICE INCLUDING A RANDOM NUMBER GENERATOR

• US 20050071231A1
• Filed: 03/10/2004
• Published: 03/31/2005
• Est. Priority Date: 07/10/2001
• Status: Active Grant

• Current Assignee: Liberty Peak Ventures, LLC (Dominion Harbor Enterprises, LLC)
• Original Assignee: American Express Travel Related Services Company, Inc. (American Express Company)
• Inventors: Saunders, Peter D., Rojewski, John, Beenau, Blayn W., Peart, Lee J., Imada, Jon, McDonald, John, Fields, Seth W.
• Granted Patent: US 7,925,535 B2
• Time in Patent Office: Days
• US Class Current: 705/16
• CPC Class Codes: G06Q 20/00 Payment architectures, schemes or protocols apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/14 specially adapted for billing systems
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/327 Short range or proximity payments by means of M-devices
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G06Q 20/4093 Monitoring of device authentication
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G06Q 30/0267 Wireless devices
• CPC Class Codes: G06Q 30/0268 at point-of-sale [POS]
• CPC Class Codes: G07C 9/28 the pass enabling tracking or indicating presence
• CPC Class Codes: G07C 9/29 the pass containing active electronic elements, e.g. smartcards
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

A system and method for securing a Radio Frequency (RF) transaction using a RF identification device (RFID) transaction device is provided. The method includes a RFID transaction device including a random number generator for generating a random number. The random number may be used by an account issuer to verify the validity of a RFID transaction device or RFID reader communicating on the RF transactions network. The authorizing agent may receive the random number and compare the random number to a device validating code.

Claims

1. A system for securing a Radio Frequency (RF) transaction comprising:

a RADIO FREQUENCY IDENTIFICATION (RFID) transaction device operable to send RF transmission, the transaction device including a database for storing a transaction device identifier, and a transaction device random number generator for generating a transaction device random number.

2. A system according to claim 1, wherein further comprising:

a RFID reader in communication with said transaction device;

a merchant Point of Sale (POS) device in communication with said RFID reader; and

an account authorizing agent in communication with said merchant POS.

3. A system according to claim 2, wherein said RFID reader comprises:

a reader random number generator for producing a reader random number.

4. A system according to claim 3, wherein said RFID reader further comprises:

a processor in communication with said reader random number generator; and

a reader database for storing a RFID reader identifier.

5. A system according to claim 2, wherein said transaction device random number generator is operable to provide said transaction device random number to said RFID reader, said reader operable to provide said transaction device random number to said POS, said POS configured to provide the transaction device random number to said account authorizing agent system.

6. A system according to claim 5, wherein said RFID reader is operable to provide said transaction device identifier to said merchant POS.

7. A system according to claim 6, wherein at least one of said transaction device identifier and said transaction device random number is provided to said RFID reader in track 1/track 2 International Standards Setting Organization format.

8. A system according to claim 6, wherein at least one of said transaction device identifier and said transaction device random number is provided to said RFID reader in POS recognizable format.

9. A system according to claim 6, wherein said authorizing agent system is configured to validate said transaction device identifier in accordance with said transaction device random number.

10. A system according to claim 4, wherein said RFID reader random number generator is operable to provide said reader random number to said POS, said POS configured to provide at least one of said transaction device random number, transaction device identifier, and reader RFID reader random number to said account authorizing agent system.

11. A system according to claim 10, wherein said RFID reader is operable to provide at least one of said transaction device random number, transaction device identifier, and reader RFID reader random number to said merchant POS.

12. A system according to claim 10, wherein at least one of said transaction device random number, transaction device identifier, and reader RFID reader random number is provided to said RFID reader in track 1/track 2 International Standards Setting Organization format.

13. A system according to claim 10, wherein at least one of said transaction device random number, transaction device identifier, and reader RFID reader random number is provided to said RFID reader in POS recognizable format.

14. A system according to claim 10, wherein said authorizing agent system is configured to validate at least one of said transaction device and said RFID reader, in accordance with said at least one of said transaction device random number, transaction device identifier, and reader RFID reader random number transaction device random number.

15. A method for securing a transaction comprising the steps of:

providing a transaction device, the transaction device including a random number generator;

providing a transaction device random number generator for generating a transaction device random number; and

validating the transaction device in accordance with the transaction device random number.

16. A method according to claim 15 further including providing a transaction device reader, the reader including a reader random number generator;

providing a reader random number generator for generating a reader random number; and

validating at least one of the transaction device and the reader in accordance with at least one of the transaction device random number and the reader random number.

17. A method for securing a transaction comprising the steps of:

providing a transaction device reader, the transaction device reader including a reader random number generator;

providing a reader random number generator for generating a reader random number; and

validating the transaction device reader in accordance with the reader random number.